A Couple Different Types of Ransomware
MrInsurability April 26, 2017 No Comments

Different Ransomware TypesToday let’s look some different ransomware types. Currently there seem to be 3 main ransomware programs that are very successful.

They are CryptoLocker, Samas and CryptorBit. These 3 became quite famous starting in 2013 and continue to be extremely successful at encrypting a computer’s files.

CryptoLocker often appears as an email from UPS or Fed Ex, talking about a problem with a delivery. If you open that email, you will have a problem!

In early 2016, an especially destructive ransomware named Locky appeared. It is so powerful that it is known to have infected computers belonging to the healthcare industry. So far hospitals and health care facilities in the United States, New Zealand and Germany have become victims.

This ransomware spreads through spam emails that include either infected Microsoft Office documents or compressed attachments (e.g., .rar, .zip). The infected attachments contain macros or JavaScript files that download the Locky files.

Locky encrypts the files on your computer. Then it changes all of the file names to something that Windows can’t open.

Samas, yet another destructive ransomware, was used to cripple the networks of healthcare facilities in 2016. Unlike Locky, Samas infects the web server. After the web server is contaminated, the Samas files then infect the organization’s entire network! As we said, there are different ransomware types. Some even connect to each other!

One Malware Can Link to Another

Systems infected with ransomware are also often infected with other malware. In the case of CryptoLocker, a user typically becomes infected by opening a malicious attachment from an email.

This malicious attachment contains Upatre, a downloader, which infects the user with GameOver Zeus. GameOver Zeus is a variation of the Zeus Trojan, which steals banking information, as well as other types of data.

Once a system is infected with GameOver Zeus, Upatre will also download CryptoLocker. Finally, CryptoLocker encrypts files on the infected system and requests that a ransom (fee) be paid.

What we have looked at today is only the tip of the iceberg! The different ransomware types change on a daily basis and at times even more often than that.

The one thing that remains constant is the need for insurance coverage against these attacks. When you want help or advice, MrInsurability, your independent insurance producer is here for you!

Simply click MrInsurability and let us know what you need. If you’re not sure what you need, we can help you with that too!